Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds genuinely new behavior: UK-only coverage, a 25-credit cost, the fuzzy-vs-exact result caveat that a name match is a 'candidate set, NOT a portfolio', and the n_distinct_titles vs n_rows distinction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.